CVE-2023-54244 ACPI: EC: Fix oops when removing custom query handlers
A local attacker with high privileges can cause a kernel oops and denial of service by removing ACPI EC custom query handlers while they are in use.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-54244?
CVE-2023-54244 is a vulnerability in Linux, published on 30 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ACPI: EC: Fix oops when removing custom query handlers
When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded.
Fix this by flushing the EC query workqueue when removing custom query handlers.
Tested on a Acer Travelmate 4002WLMi
Which versions are affected by CVE-2023-54244?
How do I fix CVE-2023-54244?
Apply the vendor's patch.
Is CVE-2023-54244 being exploited?
There is no known exploitation of CVE-2023-54244 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-54244, DEBIAN-CVE-2023-54244, GHSA-97qr-rh7x-rfq4, UBUNTU-CVE-2023-54244.